discovery:DescribeConfigurations is a Read access-level action in the discovery service. Grants permission to DescribeConfigurations API. DescribeConfigurations retrieves attributes for a list of configuration item IDs. All of the supplied IDs must be for the same asset type (server, application, process, or connection). Output fields are specific to the asset type selected. For example, the output for a server configuration item includes a list of attributes about the server, such as host name, operating system, and number of network cards
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows discovery:DescribeConfigurations. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDiscoveryDescribeConfigurations",
"Effect": "Allow",
"Action": "discovery:DescribeConfigurations",
"Resource": "*"
}
]
}